ThoughtSpot supported features

Users created in Okta are also created in ThoughtSpot as active users.

Here are some important things to note:

• Enter your First Name and Last Name to generate the ThoughtSpot Display Name.

• Use a Governance-enabled instance to manage roles when creating users.

• Role assignment is optional when assigning new users in Okta from these instances.

• Users can have multiple roles.

• ThoughtSpot Default Group Entitlements Best Practices:

  • When creating a user without specific entitlements, ThoughtSpot locally assigns them to default groups. Because Okta is unaware of these local assignments, any subsequent user profile is updated in Okta, the update pushes user details and entitlements to ThoughtSpot. This causes ThoughtSpot to interpret the missing default groups as a removal command and unassign the group or revoke the group from the user.

  • To prevent this, perform an Import Users action in Okta immediately after user creation. This pulls the default entitlements from ThoughtSpot into Okta, syncing both systems before any future modifications are made to the user profile.

Updates to the Okta user profile are pushed to ThoughtSpot.

Here are some important things to note:

• You can update the Username, First Name, Last Name, and Email.
• Enter both First Name and Last Name to generate the ThoughtSpot Display Name.
• If you leave the First Name or Last Name blank, the system ignores your update and retains the existing values.

Disabling a user in Okta results in an immediate deactivation or suspension in ThoughtSpot, where their account status is set to SUSPENDED. This action ensures that active sessions are terminated and security tokens are promptly revoked, which enhances overall security.

Users created in ThoughtSpot can be imported into Okta.

Here are some important things to note:

• All user attributes and organizational data are maintained during the import process.

• ThoughtSpot doesn't support First Name and Last Name. Okta user profiles typically include these attributes. During synchronization, Okta combines the First Name and Last Name attributes into a single Display Name field in ThoughtSpot.

Updates made to a user's profile in ThoughtSpot are automatically downloaded and updated in Okta.

Enabling or reactivating a user through Okta results in the corresponding activation or reactivation of that user within ThoughtSpot.

The user schema from ThoughtSpot is downloaded into Okta.

Changes made to the user's password through Okta are automatically synchronized to the ThoughtSpot. When changing a user's password, you only need to provide the new password; the username isn't required.

Groups and members can be pushed to integrated applications. See Manage Group Push.

Here are some important things to note:

• Groups and members are pushed to organizational groups in ThoughtSpot.

• The Display Name can be updated freely, the existing Description field can't be changed to a blank value. To update the description successfully, you must provide new text; all other modifications to this field are pushed as expected.

• You can assign a single user to multiple groups simultaneously.